$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa File: 1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa (raw, json) Hash identifier: 1zlg+gtHRugoFlF4pOnQRqOcCZGef1uAhnuEnsQJcj4= Subject key identifier: A3:EC:A0:7A:87:3D:ED:50:27:AF:E4:3D:EE:9E:C4:95:DC:E7:5B:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA02EFE164607C1214BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a0:2e:fe:16:46:07:c1:21:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ea20d6f-c80a-4fb5-a65f-23515b7746e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:09:93:8d:af:7e:1c:cf:08:1e:07:d2:8d: 78:a3:da:84:19:80:86:c9:37:57:e7:1f:2d:df:db: 0a:26:a8:05:2b:9c:b8:e6:48:54:69:b9:de:e2:6e: a7:ec:d2:28:9f:5b:c0:be:51:1f:4d:2f:2a:27:11: 01:fe:13:ba:96:a5:fe:1e:85:e0:9a:55:e4:46:46: d4:ed:ba:66:b6:a6:88:a7:d9:5c:2e:b7:63:f4:f6: fe:4a:74:6b:54:4d:25:53:43:08:1e:74:d5:7e:ea: c3:b0:40:93:71:15:4b:b1:f0:d0:74:c7:ee:88:41: c5:f6:29:9f:db:51:5d:5c:4c:93:52:d8:4a:7e:3e: fd:ac:d9:ea:7e:f0:61:4e:98:41:70:fa:8d:4f:fa: 0e:91:55:b7:01:37:4b:f4:0e:46:77:e7:80:f3:ab: 7d:c3:ca:38:8d:63:91:b1:e1:a0:a9:50:9f:c8:66: 9f:7c:ac:41:1b:b0:47:38:a8:08:5c:78:08:cf:41: 86:40:60:b9:45:17:a5:bf:b9:82:9d:9f:8e:29:2b: 77:c4:2c:ee:26:02:a5:78:0d:fe:b5:51:a4:ce:ec: b7:2e:79:b9:90:24:74:42:f4:13:84:8b:63:67:0b: eb:1d:d8:3e:ee:49:05:36:fe:e0:0c:93:21:5a:dc: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:A0:7A:87:3D:ED:50:27:AF:E4:3D:EE:9E:C4:95:DC:E7:5B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:53:3f:68:d9:cb:76:89:1d:19:eb:6f:cf:da:90:af:39:ee: 3a:62:f6:c4:25:47:ce:91:23:a3:a9:ea:5c:35:b6:23:03:09: 40:c6:d7:75:00:fc:52:3b:25:78:38:00:f2:78:92:f0:92:ab: 66:fb:f7:69:30:1e:fd:04:8b:a7:98:46:fd:d1:fa:11:13:c4: 55:60:72:26:95:d2:6e:b8:4a:c4:3c:fd:7d:29:e6:65:04:c7: 8a:42:8f:de:58:bf:ea:aa:a2:fb:3a:25:19:73:28:b5:ca:2b: b5:cd:d4:35:58:c3:8d:2c:b4:f9:6b:56:a1:8f:d9:59:77:61: ef:43:94:9e:51:ea:04:c2:c7:88:14:d0:86:1d:d3:27:32:04: c2:7a:d4:53:a5:01:b5:03:33:fc:71:92:a2:16:73:44:54:81: 4b:97:ae:d7:19:55:29:6f:ab:0c:f5:73:ce:07:8d:55:3e:b3: f1:0a:12:32:b2:dd:46:10:e6:4c:a0:10:55:6a:61:d4:02:fc: 0b:aa:9f:29:cb:70:1d:31:a0:09:6b:f5:d7:37:a6:59:c0:2a: a5:15:23:72:22:f8:e5:8e:93:c5:1c:50:db:6c:0d:5c:ce:eb: ad:c6:61:81:97:a2:ac:60:a9:0a:73:b9:99:6e:3b:0e:53:21: ae:8e:57:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6Au/hZGB8EhS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVhMjBkNmYtYzgwYS00ZmI1LWE2NWYtMjM1MTViNzc0NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoIJk42vfhzPCB4H0o14o9qEGYCGyTdX5x8t 39sKJqgFK5y45khUabne4m6n7NIon1vAvlEfTS8qJxEB/hO6lqX+HoXgmlXkRkbU 7bpmtqaIp9lcLrdj9Pb+SnRrVE0lU0MIHnTVfurDsECTcRVLsfDQdMfuiEHF9imf 21FdXEyTUthKfj79rNnqfvBhTphBcPqNT/oOkVW3ATdL9A5Gd+eA86t9w8o4jWOR seGgqVCfyGaffKxBG7BHOKgIXHgIz0GGQGC5RRelv7mCnZ+OKSt3xCzuJgKleA3+ tVGkzuy3Lnm5kCR0QvQThItjZwvrHdg+7kkFNv7gDJMhWtwo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPsoHqHPe1QJ6/kPe6exJXc51tXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWNmYzgzOWUtZDZjYy0z YWIzLThmNDAtOTE1NmY0Zjk3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZTP2jZy3aJHRnrb8/akK857jpi9sQlR86RI6Op6lw1tiMDCUDG13UA /FI7JXg4APJ4kvCSq2b792kwHv0Ei6eYRv3R+hETxFVgciaV0m64SsQ8/X0p5mUE x4pCj95Yv+qqovs6JRlzKLXKK7XN1DVYw40stPlrVqGP2Vl3Ye9DlJ5R6gTCx4gU 0IYd0ycyBMJ61FOlAbUDM/xxkqIWc0RUgUuXrtcZVSlvqwz1c84HjVU+s/EKEjKy 3UYQ5kygEFVqYdQC/AuqnynLcB0xoAlr9dc3plnAKqUVI3Ii+OWOk8UcUNtsDVzO 663GYYGXoqxgqQpzuZluOw5TIa6OV4A= -----END CERTIFICATE-----Generated at Sat Sep 26 14:55:41 2026 by rpki-client